Currently, the only way to upload a certificate to a Key Vault is to have the file stored locally on the computer that is doing the upload.
Having the possibility to upload the cert from a Blob would be ideal, as that would mean our certificates could be safely hosted being encrypted Azure Storage, and retrieved with a SAS and directly uploaded to Azure Key Vault without needing to download it locally, and then upload it.